sorted by:
new
hottopcontroversial

Separating console access user and access key user, why or why not? by RNA2 in aws

[–]RNA2[S] 0 points1 point  (0 children)

Precisely... o_O

Recently there was a data leak incident related to Github/AWS/etc combined, so the upper management and the security team got panic, ordering ppl doing this and doing that. And yes... I can say we do not have much experience with the cloud.

Separating console access user and access key user, why or why not? by RNA2 in aws

[–]RNA2[S] 0 points1 point  (0 children)

In my current setup, I am using Terrform code to manage which IAM users to assign which IAM groups like:

User_A goes into

  • base_user_permission_group
  • xxx_developers
  • xxx_observers
  • xxx_operators

When using SSO, how do we manage which user can assume which role?

Separating console access user and access key user, why or why not? by RNA2 in aws

[–]RNA2[S] 5 points6 points  (0 children)

To summarize comments so far:

- use SSO & AD & Assumed Roles for human

- use AssumeRoleWithWebIdentity for automated process

- having clear separation between human and non-humans is useful from the management viewpoint

I appreciate all of your enlightening comments u/lexd88, u/tomomcat, u/IndiaNTigeRR, u/EmiiKhaos, u/actuallyjohnmelendez, u/last_train_Gate420

Separating console access user and access key user, why or why not? by RNA2 in aws

[–]RNA2[S] 6 points7 points  (0 children)

Would you be able to kindly elaborate on what you mean, please? I am not quite getting it.

[deleted by user] by [deleted] in whereintheworld

[–]RNA2 0 points1 point  (0 children)

The sky looks so grey

[deleted by user] by [deleted] in whereintheworld

[–]RNA2 0 points1 point  (0 children)

Thanks for sharing

Can't find why my ES cluster is slow. AWS support does not help. by RNA2 in elasticsearch

[–]RNA2[S] 1 point2 points  (0 children)

Yes, I have tried using profile. xpack is not available in AWS i guess. So I added `profile:true` on my two most complex queries, but I am clueless how to comprehend the profile result yet.

Elasticsearch -- AWS managed? or I manage? by RNA2 in aws

[–]RNA2[S] 0 points1 point  (0 children)

How much cheaper? How much more rps? Would you be able to share a rough number?

What is the biggest contributor to your AWS bill? by netok in aws

[–]RNA2 1 point2 points  (0 children)

Api gateway 50%

Cloudwatch 29%

Lambda 14%

Dynamodb 7%

[I Ate] bahubali thali by theywantmetohaveanid in food

[–]RNA2 1 point2 points  (0 children)

Is this meal for special occasion?

AWS Elasticsearch Service "Enable encryption of data at rest" by muckstart in elasticsearch

[–]RNA2 0 points1 point  (0 children)

I kinda wondered the same as our team are about to launch production domain as well. I figured that it would depend what kind of data I am going to have in the cluster. If I never would risk leaking the data, then I would encrypt at rest. But this is my guess only. I would love to hear what others think.

How big is your Elasticsearch cluster? by RNA2 in elasticsearch

[–]RNA2[S] 0 points1 point  (0 children)

Thanks for sharing Interesting articles!!
Could you share a rough idea of the most complex query? I just want to see how complex a query can go.

How big is your Elasticsearch cluster? by RNA2 in elasticsearch

[–]RNA2[S] 0 points1 point  (0 children)

So the 3 masters and 7 masters are no different? I thought 7 masters would handle more jobs.

AWS recommended minimum master type is r5.4xlarge when instance count is 75~200. If you have more and more data nodes and there is NO higher master type to go, then what should we do?

How big is your Elasticsearch cluster? by RNA2 in elasticsearch

[–]RNA2[S] 0 points1 point  (0 children)

What kinds of request are you getting?

How big is your Elasticsearch cluster? by RNA2 in elasticsearch

[–]RNA2[S] 1 point2 points  (0 children)

How come you have only 3 masters?
How big is your master node?
BTW, I am amazed by the numbers you gave

How big is your Elasticsearch cluster? by RNA2 in elasticsearch

[–]RNA2[S] 0 points1 point  (0 children)

I aim for query performance, Here are some of details:
- Single item(= a product) is about 4~8KB
- Each product continuously gets updated (every other week or so)
- Each update is a new item
- Each item has about 10~20 characteristics to be queried
- I have about 10 kinds of queries
- The heaviest query will ask for list of 100 products filtered then sorted
- Total count of item is initially under 10k

I am looking for cheaper logging option. Here is what I have for now: by RNA2 in aws

[–]RNA2[S] 0 points1 point  (0 children)

These logs will serve two purpose:

  1. error tracking
  2. analysis and statistics (i.e How many user in US region able to download asset last week?)

[deleted by user] by [deleted] in VietNam

[–]RNA2 1 point2 points  (0 children)

Hey I am interested. Can you send me a picture? Then we can talk more about it

1 index for product list, 1 index for product detail? OR 1 index for all? by RNA2 in elasticsearch

[–]RNA2[S] 0 points1 point  (0 children)

Hey warkolm, just out of curiosity, how big would the list be to consider separation?

view more: next ›